Threat Investigation
Request a demo

CVE-2026-75969

Critical

Description

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified firmware on the device without administrator credentials. This vulnerability allows attackers to upload modified firmware to the device without admin credentials. This issue affects: * Move 4K 12X before: 0.0.98 * Move 4K 20X before: 0.1.33 * Move 4K 30X before: 2.1.17 * Link 4K 12X before: 0.0.99 * Link 4K 20X before: 0.1.37 * Link 4K 30X before: 2.1.18 * Move SE 12X before: 9.1.66 * Move SE 20X before: 9.1.44 * Move SE 30X before: 9.1.46 * Studio 4K 12X before: 8.3.32 * Studio 4K 20X before: 8.3.32 * Studio SE 12X before: 8.3.32 * Studio SE 20X before: 8.3.32 * All Generation 2 cameras, including: PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G2; PT12X-USB-GY-G2, PT12X-USB-WH-G2; PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G2; PT20X-USB-GY-G2, PT20X-USB-WH-G2; PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G2; PTVL-ZCAM, PTVL-NDI-ZCAM; PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G2; PT12X-ZCAM, PT12X-NDI-ZCAM; PT20X-ZCAM, PT20X-NDI-ZCAM; Studio Pro - All versions * Upgrade Tool - All versions

SeverityCritical
CVSS9.1
Exploit probability—
ProductMove 4K 12X
PublishedSep 30, 2026
First seenSep 30, 2026
Weakness typeCWE-306Missing authentication for critical function

How to fix

Update
  • PTZOptics Move 4K 12X0.0.98 or later
  • PTZOptics Move 4K 20X0.1.33 or later
  • PTZOptics Move 4K 30X2.1.17 or later
  • PTZOptics Link 4K 12X0.0.99 or later
  • PTZOptics Link 4K 20X0.1.37 or later
  • PTZOptics Link 4K 30X2.1.18 or later
  • PTZOptics Move SE 12X9.1.66 or later
  • PTZOptics Move SE 20X9.1.44 or later
  • PTZOptics Move SE 30X9.1.46 or later
  • PTZOptics Studio 4K 12X8.3.32 or later
  • PTZOptics Studio 4K 20X8.3.32 or later
  • PTZOptics Studio SE 12X8.3.32 or later

Affected products

ProductAffected versionsFixed in
PTZOptics Move 4K 12Xv < 0.0.980.0.98
PTZOptics Move 4K 20Xv < 0.1.330.1.33
PTZOptics Move 4K 30Xv < 2.1.172.1.17
PTZOptics Link 4K 12Xv < 0.0.990.0.99
PTZOptics Link 4K 20Xv < 0.1.370.1.37
PTZOptics Link 4K 30Xv < 2.1.182.1.18
PTZOptics Move SE 12Xv < 9.1.669.1.66
PTZOptics Move SE 20Xv < 9.1.449.1.44
PTZOptics Move SE 30Xv < 9.1.469.1.46
PTZOptics Studio 4K 12Xv < 8.3.328.3.32
PTZOptics Studio 4K 20Xv < 8.3.328.3.32
PTZOptics Studio SE 12Xv < 8.3.328.3.32
PTZOptics Studio SE 20Xv < 8.3.328.3.32
PTZOptics PT12X-SDI-GY-G2, PT12X-SDI-WH-G2, PT12X-NDI-GY-G2, PT12X-NDI-WH-G20—
PTZOptics PT12X-USB-GY-G2, PT12X-USB-WH-G20—
PTZOptics PT20X-SDI-GY-G2, PT20X-SDI-WH-G2, PT20X-NDI-GY-G2, PT20X-NDI-WH-G20—
PTZOptics PT20X-USB-GY-G2, PT20X-USB-WH-G20—
PTZOptics PT30X-SDI-GY-G2, PT30X-SDI-WH-G2, PT30X-NDI-GY-G2, PT30X-NDI-WH-G20—
PTZOptics PTVL-ZCAM, PTVL-NDI-ZCAM0—
PTZOptics PTEPTZ-ZCAM-G2, PTEPTZ-NDI-ZCAM-G20—
PTZOptics PT12X-ZCAM, PT12X-NDI-ZCAM0—
PTZOptics PT20X-ZCAM, PT20X-NDI-ZCAM0—
PTZOptics Studio Pro0—
PTZOptics Upgrade Tool0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.